If you use a watermarking model to do the synonym replacement, it will rephrase it in a way that is compatible with the watermark...